Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0806867458DD11F189B81AD5CE1D38B0.roa
File: 0806867458DD11F189B81AD5CE1D38B0.roa (raw, json)
Hash identifier: hrasrtGImyGVdUarwvHXf2tOd4sOO+aGKZjlUGQO4uc=
Subject key identifier: 26:6A:AB:14:79:EB:97:58:4A:85:7A:22:1D:D7:98:9B:AF:BA:7B:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0806867458DD11F189B81AD5CE1D38B0.roa
Signing time: Tue 26 May 2026 08:29:37 +0000
ROA not before: Tue 26 May 2026 08:29:32 +0000
ROA not after: Sun 28 Jun 2026 08:29:32 +0000
asID: 44559
IP address blocks: 156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113091 (0x1b9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 08:29:32 2026 GMT
Not After : Jun 28 08:29:32 2026 GMT
Subject: CN=6a1559f1-1226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:40:55:e5:4f:70:43:72:8b:be:ad:61:ee:
af:0c:0c:2d:56:b9:ac:d3:32:0b:e1:34:71:1d:2a:
85:4f:90:27:1c:0b:5c:2f:c8:bb:00:d6:f1:4e:99:
d3:f2:4e:90:0f:4e:53:ed:9c:57:96:4c:a6:b6:af:
8e:2a:d5:ef:44:7c:95:b3:a9:bf:65:d7:e8:95:c7:
6b:ad:98:73:0d:40:9c:ee:d7:5b:f4:ff:3f:e4:aa:
89:66:09:51:13:83:b9:14:35:88:59:ba:81:a7:01:
53:6b:01:f5:14:df:26:f1:22:2a:eb:f6:9c:3d:14:
0e:41:ca:e2:b8:fd:80:bf:eb:5b:a2:01:65:eb:e9:
1d:7d:25:bb:dd:5d:e1:38:55:aa:a2:e3:ad:a1:5b:
82:f5:78:40:a3:93:b1:5a:6b:2c:93:df:ab:19:fd:
6d:ca:0e:c4:db:c9:59:d9:bd:d2:18:d0:d3:13:df:
4b:7c:49:23:9b:d2:72:dd:20:98:64:0d:ee:f2:27:
52:7e:03:c4:99:73:fd:50:5d:65:c4:07:1b:9f:5f:
21:b5:5b:32:cf:cf:9e:94:ea:1a:7f:94:07:01:25:
de:2f:6b:89:86:91:f1:3b:4d:52:cb:75:c4:65:75:
c7:05:78:76:16:82:95:de:68:64:b6:ef:e9:75:49:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:AB:14:79:EB:97:58:4A:85:7A:22:1D:D7:98:9B:AF:BA:7B:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0806867458DD11F189B81AD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.245.0-156.246.248.255
Signature Algorithm: sha256WithRSAEncryption
58:06:4c:49:57:a0:60:79:c3:ef:a7:75:47:ce:ab:d3:d2:ce:
64:f6:3a:e9:2a:4c:67:ac:06:56:08:89:fc:2a:f3:40:88:c6:
1a:e4:6e:02:a6:26:64:9a:3a:52:df:75:ab:43:77:94:e7:fd:
57:94:4f:33:2a:81:9b:22:9c:3c:1d:a7:34:4f:c2:6f:1e:9b:
ea:9a:d3:e9:d6:9d:94:ae:c2:8d:60:1f:ea:f2:5f:31:4c:7c:
0e:54:ef:04:50:7f:5b:2e:47:99:f0:1d:c7:c9:42:e4:60:3a:
51:0d:d9:13:a5:88:f8:90:81:92:ce:c8:a5:27:b7:98:9c:65:
f9:11:dd:69:eb:a6:cd:37:b7:49:16:65:7c:b7:51:ed:40:4b:
80:47:d5:0b:d2:85:ea:fe:c2:62:86:8d:8e:f1:74:55:37:29:
82:98:57:d9:4e:be:b7:42:b2:5b:8a:dc:f4:65:11:d0:08:71:
03:8e:6c:7d:7c:42:2e:d6:80:45:b0:cb:7b:4f:4b:27:c1:d2:
1f:6a:04:45:77:fe:29:ee:66:da:02:ba:c6:d4:b7:3c:73:9a:
19:a9:fb:6b:0f:a2:10:e1:b5:57:70:b7:ee:b9:6a:31:af:52:
5e:30:c6:f7:b9:64:9d:ce:17:80:3c:22:9e:1b:c8:f4:ce:ec:
b7:ea:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:02 2026 by rpki-client